github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-05-22 17:51:16 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FEATURE: do not allow moderators to export user list (#6418)

Browse Source
This commit is contained in:
Kyle Zhao
2018-09-21 09:07:13 +08:00
committed by GitHub
parent 5f042a2c8d
commit 4bb980b9f7
4 changed files with 48 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
lib/guardian.rb
View File

@ -357,7 +357,8 @@ class Guardian
def can_export_entity?(entity)
return false unless @user
return true if is_staff?
return true if is_admin?
return entity != 'user_list' if is_moderator?
# Regular users can only export their archives
return false unless entity == "user_archive"